
$ rpki-client -vvvf rpki.apnic.net/member_repository/A912A138/BB06B338392711EB9F955E7EC4F9AE02/6Ind1VQsbSydx0DhJGqedI51E1I.mft
File: 6Ind1VQsbSydx0DhJGqedI51E1I.mft (raw, json)
Hash identifier: TUz8yDPTFZ6I5iA1N17rj6ToYbJnEicITOAaPec1wA0=
Subject key identifier: A5:CC:9A:B5:1F:11:84:86:9D:69:F5:B0:B7:35:54:BF:75:0D:D1:58
Authority key identifier: E8:89:DD:D5:54:2C:6D:2C:9D:C7:40:E1:24:6A:9E:74:8E:75:13:52
Certificate issuer: /CN=A912A138/serialNumber=E889DDD5542C6D2C9DC740E1246A9E748E751352
Certificate serial: 0848
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6Ind1VQsbSydx0DhJGqedI51E1I.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912A138/BB06B338392711EB9F955E7EC4F9AE02/6Ind1VQsbSydx0DhJGqedI51E1I.mft
Manifest number: 082B
Signing time: Sat 10 Oct 2026 21:15:12 +0000
Manifest this update: Sat 10 Oct 2026 21:15:11 +0000
Manifest next update: Sat 17 Oct 2026 21:15:11 +0000
Files and hashes: 1: 6Ind1VQsbSydx0DhJGqedI51E1I.crl (hash: da+Fc9H4s435VvLpUqjtkrRPH4mzvDXpxXXnDthCiOc=)
2: 243B94A23E7A11EBBFFAC96BC4F9AE02.roa (hash: L/xVHObBHsaIQPSdy9klB+1WP6FIbwAGl9r7G8wB2mw=)
3: BB684734816B11EFA4D23930C4F9AE02.roa (hash: hmDyUV7+mZ7MdRuc//krFZPVrd+9B1PiTbQI1PUzL2M=)
4: 9E82296E5FA611EF9A75477FC4F9AE02.roa (hash: xCDnPY3o5HUe6Fs42m2XobMw97iGu7B2szmglwYkmfI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912A138/BB06B338392711EB9F955E7EC4F9AE02/6Ind1VQsbSydx0DhJGqedI51E1I.crl
rsync://rpki.apnic.net/member_repository/A912A138/BB06B338392711EB9F955E7EC4F9AE02/6Ind1VQsbSydx0DhJGqedI51E1I.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6Ind1VQsbSydx0DhJGqedI51E1I.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 17 Oct 2026 21:15:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2120 (0x848)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912A138, serialNumber=E889DDD5542C6D2C9DC740E1246A9E748E751352
Validity
Not Before: Oct 10 21:15:11 2026 GMT
Not After : Oct 17 21:15:11 2026 GMT
Subject: CN=6acaaae0-1393
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:37:a6:0a:20:34:9c:00:e3:33:71:f0:e6:35:
c9:aa:d1:00:b6:6c:ce:3f:78:80:36:15:2e:68:dd:
25:b8:4d:03:a1:57:8b:10:65:a5:2b:a1:10:c5:72:
b0:95:7b:25:e8:f4:7a:d7:4d:5f:73:f8:4d:29:13:
28:ac:e1:65:5c:45:d5:4b:db:a0:af:84:37:be:cd:
04:95:4c:49:f6:ff:3e:92:0f:bd:1f:d5:d9:c6:c2:
1d:d3:e0:0e:9c:d3:05:b4:7d:43:0d:d8:f6:51:b1:
74:a3:f8:40:46:9e:d1:fe:d4:3b:9c:5e:42:25:17:
78:2d:62:16:90:fe:58:7f:7e:93:4d:9a:b3:e3:10:
f2:0d:e1:f8:f5:dd:64:08:2a:f3:ef:e9:db:a8:89:
b9:a7:05:72:c8:50:74:28:52:dd:2d:cb:6f:e5:34:
07:9e:3b:2e:76:30:3b:8f:b0:5c:95:55:56:c2:03:
23:57:b8:55:51:86:20:5e:bf:6d:90:0a:a5:4b:25:
ef:85:cc:d8:1d:aa:4b:9a:96:b3:72:cc:05:66:44:
86:f6:62:d2:94:97:6d:6c:fd:2c:af:5e:9c:9b:d9:
2e:9f:c1:25:2f:a6:b8:2c:28:c3:21:72:ce:37:40:
f2:86:1e:5b:d9:1f:a4:c4:ee:50:c6:4c:2f:05:53:
58:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:CC:9A:B5:1F:11:84:86:9D:69:F5:B0:B7:35:54:BF:75:0D:D1:58
X509v3 Authority Key Identifier:
keyid:E8:89:DD:D5:54:2C:6D:2C:9D:C7:40:E1:24:6A:9E:74:8E:75:13:52
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912A138/BB06B338392711EB9F955E7EC4F9AE02/6Ind1VQsbSydx0DhJGqedI51E1I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6Ind1VQsbSydx0DhJGqedI51E1I.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912A138/BB06B338392711EB9F955E7EC4F9AE02/6Ind1VQsbSydx0DhJGqedI51E1I.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7b:22:a5:ad:84:cd:32:5d:1c:01:8c:2d:50:35:c8:8c:8e:f4:
91:0a:31:5a:7e:fb:45:d6:73:7a:11:99:9f:e8:af:04:87:d8:
6a:d3:f8:45:ed:e4:48:30:a6:97:9b:55:bf:a2:ba:1f:99:9d:
bf:3c:e2:37:91:93:f5:88:b2:bc:12:39:3b:ad:79:f7:1b:e7:
94:aa:4e:ab:e1:e3:8a:e0:42:aa:21:b4:ee:8a:63:50:81:9c:
35:28:b0:16:6f:28:23:d4:c5:fb:b1:f6:59:4d:fe:68:69:10:
04:be:f2:c0:b7:bb:1b:55:c5:9d:46:f0:7b:ee:fa:e3:3f:31:
4c:9a:90:a8:0e:16:b4:3a:8c:34:44:bb:5a:84:71:f5:f0:55:
e6:71:87:bb:7c:95:8f:91:6b:d5:e0:2b:88:56:8c:88:27:78:
7d:27:5f:b8:8c:1e:d1:75:f9:40:51:d5:46:d2:53:0f:32:e6:
53:92:05:19:a6:ba:cd:64:c4:ee:58:b9:e8:f8:57:d1:a7:22:
61:d3:4b:6b:37:a6:9a:25:bb:cf:09:8c:fe:a4:85:d2:60:24:
b8:cd:e3:e6:2f:aa:00:fe:fa:6a:4d:c2:cc:64:4b:1e:dd:d6:
f8:31:a3:92:9f:f2:83:84:f3:0f:9b:b4:9b:15:95:73:a0:a3:
76:3c:11:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 19:45:45 2026 by rpki-client